apiVersion: v1
items:
- apiVersion: v1
  kind: DeploymentConfig
  metadata:
    labels:
      app: bodhi
      service: web
    name: bodhi-web
  spec:
    replicas: {{ bodhi_openshift_pods }}
    selector:
      deploymentconfig: bodhi-web
    strategy:
      activeDeadlineSeconds: 21600
      recreateParams:
      mid:
        execNewPod:
          command:
            - /bin/sh
            - '-c'
            - >-
              (/usr/bin/alembic-3 -c /srv/bodhi/alembic.ini current | grep -q
              "(head)") || ( cd /srv/bodhi && /usr/bin/alembic-3 -c
              /srv/bodhi/alembic.ini upgrade head)
          containerName: bodhi-web
          volumes:
            - config-volume
        failurePolicy: Abort
      timeoutSeconds: 600
    resources: {}
    type: Recreate
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: bodhi-web
          deploymentconfig: bodhi-web
{% if env == "staging" %}
          monitoring-key: cpe
{% endif %}
      spec:
        containers:
        - name: bodhi-web
          image: bodhi-base:latest
          command: ["gunicorn"]
          args: ["--paste", "/etc/bodhi/production.ini", "-b", "0.0.0.0:8080", "-w", "4", "--log-level", "DEBUG", "-k", "gthread", "--threads", "2", "--preload", "--log-file=-"]
          ports:
          - containerPort: 8080
            name: web
          resources: {}
          volumeMounts:
          - name: config-volume
            mountPath: /etc/bodhi
            readOnly: true
          - name: keytab-volume
            mountPath: /etc/keytabs
            readOnly: true
          - name: httpdir-volume
            mountPath: /httpdir
          - name: fedora-messaging-config-volume
            mountPath: /etc/fedora-messaging
            readOnly: true
          - name: fedora-messaging-ca-volume
            mountPath: /etc/pki/fedora-messaging/cacert.pem
            subPath: cacert.pem
            readOnly: true
          - name: fedora-messaging-crt-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-cert.pem
            subPath: bodhi-cert.pem
            readOnly: true
          - name: fedora-messaging-key-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-key.pem
            subPath: bodhi-key.pem
            readOnly: true
          readinessProbe:
            timeoutSeconds: 10
            initialDelaySeconds: 5
            periodSeconds: 60
            httpGet:
              path: /healthz/ready
              port: 8080
          livenessProbe:
            timeoutSeconds: 10
            initialDelaySeconds: 30
            periodSeconds: 60
            httpGet:
              path: /healthz/live
              port: 8080
        volumes:
        - name: config-volume
          configMap:
            name: bodhi-configmap
        - name: keytab-volume
          secret:
            secretName: bodhi-keytab
        - name: httpdir-volume
          emptyDir: {}
        - name: fedora-messaging-config-volume
          configMap:
            name: fedora-messaging-configmap
        - name: fedora-messaging-ca-volume
          secret:
            secretName: bodhi-fedora-messaging-ca
        - name: fedora-messaging-crt-volume
          secret:
            secretName: bodhi-fedora-messaging-crt
        - name: fedora-messaging-key-volume
          secret:
            secretName: bodhi-fedora-messaging-key
    triggers:
    - imageChangeParams:
        automatic: true
        containerNames:
        - bodhi-web
        from:
          kind: ImageStreamTag
          name: bodhi-base:latest
          namespace: bodhi
      type: ImageChange
    - type: ConfigChange
kind: List
metadata: {}
---
apiVersion: v1
items:
- apiVersion: v1
  kind: DeploymentConfig
  metadata:
    labels:
      app: bodhi
      service: consumer
    name: bodhi-consumer
  spec:
    replicas: {{ bodhi_openshift_pods }}
    selector:
      deploymentconfig: bodhi-consumer
    strategy:
      activeDeadlineSeconds: 21600
      recreateParams:
        timeoutSeconds: 600
      resources: {}
      rollingParams:
        intervalSeconds: 1
        maxSurge: 25%
        maxUnavailable: 25%
        timeoutSeconds: 600
        updatePeriodSeconds: 1
      type: Rolling
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: bodhi-consumer
          deploymentconfig: bodhi-consumer
      spec:
        containers:
        - name: bodhi-consumer
          image: bodhi-base:latest
          command: ["/usr/bin/fedora-messaging"]
          args: ["consume"]
          resources: {}
          volumeMounts:
          - name: config-volume
            mountPath: /etc/bodhi
            readOnly: true
          - name: keytab-volume
            mountPath: /etc/keytabs
            readOnly: true
          - name: fedora-messaging-config-volume
            mountPath: /etc/fedora-messaging
            readOnly: true
          - name: fedora-messaging-ca-volume
            mountPath: /etc/pki/fedora-messaging/cacert.pem
            subPath: cacert.pem
            readOnly: true
          - name: fedora-messaging-crt-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-cert.pem
            subPath: bodhi-cert.pem
            readOnly: true
          - name: fedora-messaging-key-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-key.pem
            subPath: bodhi-key.pem
            readOnly: true
        volumes:
        - name: config-volume
          configMap:
            name: bodhi-configmap
        - name: keytab-volume
          secret:
            secretName: bodhi-keytab
        - name: fedora-messaging-config-volume
          configMap:
            name: fedora-messaging-configmap
        - name: fedora-messaging-ca-volume
          secret:
            secretName: bodhi-fedora-messaging-ca
        - name: fedora-messaging-crt-volume
          secret:
            secretName: bodhi-fedora-messaging-crt
        - name: fedora-messaging-key-volume
          secret:
            secretName: bodhi-fedora-messaging-key
    triggers:
    - imageChangeParams:
        automatic: true
        containerNames:
        - bodhi-consumer
        from:
          kind: ImageStreamTag
          name: bodhi-base:latest
          namespace: bodhi
      type: ImageChange
    - type: ConfigChange
kind: List
metadata: {}
---
apiVersion: v1
items:
- apiVersion: v1
  kind: DeploymentConfig
  metadata:
    labels:
      app: bodhi
      service: celery
    name: bodhi-celery
  spec:
    replicas: {{ bodhi_openshift_pods }}
    selector:
      deploymentconfig: bodhi-celery
    strategy:
      activeDeadlineSeconds: 21600
      recreateParams:
        timeoutSeconds: 600
      resources: {}
      rollingParams:
        intervalSeconds: 1
        maxSurge: 25%
        maxUnavailable: 25%
        timeoutSeconds: 600
        updatePeriodSeconds: 1
      type: Rolling
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: bodhi-celery
          deploymentconfig: bodhi-celery
      spec:
        containers:
        - name: bodhi-celery
          image: bodhi-base:latest
          command: ["/usr/bin/celery"]
          args: ["-A", "bodhi.server.tasks.app", "worker", "-l", "info", "-Q", "celery"]
          resources: {}
          volumeMounts:
          - name: config-volume
            mountPath: /etc/bodhi
            readOnly: true
          - name: keytab-volume
            mountPath: /etc/keytabs
            readOnly: true
          - name: fedora-messaging-config-volume
            mountPath: /etc/fedora-messaging
            readOnly: true
          - name: fedora-messaging-ca-volume
            mountPath: /etc/pki/fedora-messaging/cacert.pem
            subPath: cacert.pem
            readOnly: true
          - name: fedora-messaging-crt-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-cert.pem
            subPath: bodhi-cert.pem
            readOnly: true
          - name: fedora-messaging-key-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-key.pem
            subPath: bodhi-key.pem
            readOnly: true
        volumes:
        - name: config-volume
          configMap:
            name: bodhi-configmap
        - name: keytab-volume
          secret:
            secretName: bodhi-keytab
        - name: fedora-messaging-config-volume
          configMap:
            name: fedora-messaging-configmap
        - name: fedora-messaging-ca-volume
          secret:
            secretName: bodhi-fedora-messaging-ca
        - name: fedora-messaging-crt-volume
          secret:
            secretName: bodhi-fedora-messaging-crt
        - name: fedora-messaging-key-volume
          secret:
            secretName: bodhi-fedora-messaging-key
    triggers:
    - imageChangeParams:
        automatic: true
        containerNames:
        - bodhi-celery
        from:
          kind: ImageStreamTag
          name: bodhi-base:latest
          namespace: bodhi
      type: ImageChange
    - type: ConfigChange
kind: List
metadata: {}
---
apiVersion: v1
items:
- apiVersion: v1
  kind: DeploymentConfig
  metadata:
    labels:
      app: bodhi
      service: celery-beat
    name: bodhi-celery-beat
  spec:
    # There must be only one celery-beat worker
    replicas: 1
    selector:
      deploymentconfig: bodhi-celery-beat
    strategy:
      activeDeadlineSeconds: 21600
      recreateParams:
        timeoutSeconds: 600
      resources: {}
      rollingParams:
        intervalSeconds: 1
        maxSurge: 25%
        maxUnavailable: 25%
        timeoutSeconds: 600
        updatePeriodSeconds: 1
      type: Rolling
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: bodhi-celery-beat
          deploymentconfig: bodhi-celery-beat
      spec:
        containers:
        - name: bodhi-celery-beat
          image: bodhi-base:latest
          workingDir: "/tmp"
          command: ["/usr/bin/celery"]
          args: ["-A", "bodhi.server.tasks.app", "beat", "-l", "info"]
          resources: {}
          volumeMounts:
          - name: config-volume
            mountPath: /etc/bodhi
            readOnly: true
          - name: keytab-volume
            mountPath: /etc/keytabs
            readOnly: true
          - name: fedora-messaging-config-volume
            mountPath: /etc/fedora-messaging
            readOnly: true
          - name: fedora-messaging-ca-volume
            mountPath: /etc/pki/fedora-messaging/cacert.pem
            subPath: cacert.pem
            readOnly: true
          - name: fedora-messaging-crt-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-cert.pem
            subPath: bodhi-cert.pem
            readOnly: true
          - name: fedora-messaging-key-volume
            mountPath: /etc/pki/fedora-messaging/bodhi-key.pem
            subPath: bodhi-key.pem
            readOnly: true
        volumes:
        - name: config-volume
          configMap:
            name: bodhi-configmap
        - name: keytab-volume
          secret:
            secretName: bodhi-keytab
        - name: fedora-messaging-config-volume
          configMap:
            name: fedora-messaging-configmap
        - name: fedora-messaging-ca-volume
          secret:
            secretName: bodhi-fedora-messaging-ca
        - name: fedora-messaging-crt-volume
          secret:
            secretName: bodhi-fedora-messaging-crt
        - name: fedora-messaging-key-volume
          secret:
            secretName: bodhi-fedora-messaging-key
    triggers:
    - imageChangeParams:
        automatic: true
        containerNames:
        - bodhi-celery-beat
        from:
          kind: ImageStreamTag
          name: bodhi-base:latest
          namespace: bodhi
      type: ImageChange
    - type: ConfigChange
kind: List
metadata: {}
